Security Policy

Intellectyx Technologies takes the security of our systems and the privacy of our users seriously. We welcome reports from security researchers and the public about potential vulnerabilities in our products and services. We are committed to working with the security community to verify, reproduce, and respond to legitimate reports in a timely manner.

We ask that you make a good-faith effort to avoid privacy violations, destruction of data, and disruption or degradation of our services during your research. Please only interact with accounts you own or have explicit permission to test.

We follow a responsible disclosure model. We ask researchers to:

• Report vulnerabilities promptly and in good faith to our security team.
• Allow us a reasonable time to investigate and remediate before any public disclosure.
• Avoid accessing, modifying, or deleting data that does not belong to you.
• Not perform denial-of-service attacks, social engineering, or physical attacks against our infrastructure or staff.
• Not exploit a vulnerability beyond the minimum necessary to demonstrate it.
• Keep all vulnerability details confidential until we have issued a fix or acknowledged the report publicly.

Researchers who follow these guidelines will not face legal action from Intellectyx related to their security research. We are grateful for responsible disclosures and will acknowledge contributions where the researcher consents.

To report a security vulnerability, please email our security team at hello@intellectyx.ai with the following information:

• A clear description of the vulnerability and its potential impact.
• The product, service, or URL where the vulnerability was identified.
• Step-by-step instructions to reproduce the issue.
• Any supporting evidence such as screenshots, logs, or proof-of-concept code.
• Your contact details so we can follow up if needed.

Please encrypt sensitive reports using our PGP key if available, or mark the email subject as [SECURITY] so it is routed to our security team immediately.

We are committed to responding to all legitimate security reports in a timely and transparent manner. Our target response timeline is as follows:

Timelines may vary depending on the complexity and severity of the reported issue. We will keep you informed if additional time is required.

For all security-related inquiries, vulnerability reports, or abuse notifications, please use the contact details below. Our team monitors these channels and will respond as promptly as possible.